Class LdapPrincipal

A principal identified by a distinguished name as specified by
RFC 2253.

After successful authentication, a user Principal
can be associated with a particular Subject
to augment that Subject with an additional identity.
Authorization decisions can then be based upon the
Principals that are associated with a Subject.